{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2024:LU3M6JVMNG6F7ZNWBJ4STKPUPZ","short_pith_number":"pith:LU3M6JVM","canonical_record":{"source":{"id":"2405.11135","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-18T01:25:47Z","cross_cats_sorted":[],"title_canon_sha256":"fef7ad6a57c38904cd23ba59f5cfedbcec1881ad8bd22dd6c5ab6940c098fe79","abstract_canon_sha256":"2f6ca10fa9a9083f14fffb113e0b1bc9ecdced7530f63cf6d35576229fceaa68"},"schema_version":"1.0"},"canonical_sha256":"5d36cf26ac69bc5fe5b60a7929a9f47e48433a744912bdb2a5adafc42950a15f","source":{"kind":"arxiv","id":"2405.11135","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.11135","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"arxiv_version","alias_value":"2405.11135v1","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.11135","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"pith_short_12","alias_value":"LU3M6JVMNG6F","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"pith_short_16","alias_value":"LU3M6JVMNG6F7ZNW","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"pith_short_8","alias_value":"LU3M6JVM","created_at":"2026-07-05T08:20:33Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2024:LU3M6JVMNG6F7ZNWBJ4STKPUPZ","target":"record","payload":{"canonical_record":{"source":{"id":"2405.11135","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-18T01:25:47Z","cross_cats_sorted":[],"title_canon_sha256":"fef7ad6a57c38904cd23ba59f5cfedbcec1881ad8bd22dd6c5ab6940c098fe79","abstract_canon_sha256":"2f6ca10fa9a9083f14fffb113e0b1bc9ecdced7530f63cf6d35576229fceaa68"},"schema_version":"1.0"},"canonical_sha256":"5d36cf26ac69bc5fe5b60a7929a9f47e48433a744912bdb2a5adafc42950a15f","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T08:20:33.807038Z","signature_b64":"P17QozjNZiLDkhbdYexxMcppwjvCPc4qbpg29twmRXoQPR+pbbJbIhYvLBYtUJ36JKLzIH4+6HzmrlttJUcADQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5d36cf26ac69bc5fe5b60a7929a9f47e48433a744912bdb2a5adafc42950a15f","last_reissued_at":"2026-07-05T08:20:33.806608Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T08:20:33.806608Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2405.11135","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:20:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"/NcSObivuBwcsojrXla65hJctm9zulJE3F0ZjzqNu0aRsM461LRrpD4KSNsAYIZjskexn97YyIXimIQKsbVBAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:56:31.575703Z"},"content_sha256":"ba4ce13865485b05312f01161f4c8fd1e190eea890efefde6a27cb728a70f4ba","schema_version":"1.0","event_id":"sha256:ba4ce13865485b05312f01161f4c8fd1e190eea890efefde6a27cb728a70f4ba"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2024:LU3M6JVMNG6F7ZNWBJ4STKPUPZ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Guanlin Li, Jie Zhang, Jiyan He, Nenghai Yu, Tianwei Zhang, Tianyi Wei, Weiming Zhang, Weitao Feng, Wenbo Zhou","submitted_at":"2024-05-18T01:25:47Z","abstract_excerpt":"Diffusion models have achieved remarkable success in generating high-quality images. Recently, the open-source models represented by Stable Diffusion (SD) are thriving and are accessible for customization, giving rise to a vibrant community of creators and enthusiasts. However, the widespread availability of customized SD models has led to copyright concerns, like unauthorized model distribution and unconsented commercial use. To address it, recent works aim to let SD models output watermarked content for post-hoc forensics. Unfortunately, none of them can achieve the challenging white-box pro"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.11135","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2405.11135/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T08:20:33Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"WJ3iXX6soX8gGjkWCrHi3YSBzm4YJtwdLcYvXP7FtXK01HUYANaHo5J/2d6f8l+P0rAN5+GfNN2eYMZJU0aRAQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-08-08T16:56:31.576222Z"},"content_sha256":"eb5fe1c311893b7caff2556fc5734ef61137918c8efc488f81f7b96054352c3b","schema_version":"1.0","event_id":"sha256:eb5fe1c311893b7caff2556fc5734ef61137918c8efc488f81f7b96054352c3b"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LU3M6JVMNG6F7ZNWBJ4STKPUPZ/bundle.json","state_url":"https://pith.science/pith/LU3M6JVMNG6F7ZNWBJ4STKPUPZ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LU3M6JVMNG6F7ZNWBJ4STKPUPZ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-08-08T16:56:31Z","links":{"resolver":"https://pith.science/pith/LU3M6JVMNG6F7ZNWBJ4STKPUPZ","bundle":"https://pith.science/pith/LU3M6JVMNG6F7ZNWBJ4STKPUPZ/bundle.json","state":"https://pith.science/pith/LU3M6JVMNG6F7ZNWBJ4STKPUPZ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LU3M6JVMNG6F7ZNWBJ4STKPUPZ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2024:LU3M6JVMNG6F7ZNWBJ4STKPUPZ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"2f6ca10fa9a9083f14fffb113e0b1bc9ecdced7530f63cf6d35576229fceaa68","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-18T01:25:47Z","title_canon_sha256":"fef7ad6a57c38904cd23ba59f5cfedbcec1881ad8bd22dd6c5ab6940c098fe79"},"schema_version":"1.0","source":{"id":"2405.11135","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2405.11135","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"arxiv_version","alias_value":"2405.11135v1","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2405.11135","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"pith_short_12","alias_value":"LU3M6JVMNG6F","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"pith_short_16","alias_value":"LU3M6JVMNG6F7ZNW","created_at":"2026-07-05T08:20:33Z"},{"alias_kind":"pith_short_8","alias_value":"LU3M6JVM","created_at":"2026-07-05T08:20:33Z"}],"graph_snapshots":[{"event_id":"sha256:eb5fe1c311893b7caff2556fc5734ef61137918c8efc488f81f7b96054352c3b","target":"graph","created_at":"2026-07-05T08:20:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2405.11135/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Diffusion models have achieved remarkable success in generating high-quality images. Recently, the open-source models represented by Stable Diffusion (SD) are thriving and are accessible for customization, giving rise to a vibrant community of creators and enthusiasts. However, the widespread availability of customized SD models has led to copyright concerns, like unauthorized model distribution and unconsented commercial use. To address it, recent works aim to let SD models output watermarked content for post-hoc forensics. Unfortunately, none of them can achieve the challenging white-box pro","authors_text":"Guanlin Li, Jie Zhang, Jiyan He, Nenghai Yu, Tianwei Zhang, Tianyi Wei, Weiming Zhang, Weitao Feng, Wenbo Zhou","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-18T01:25:47Z","title":"AquaLoRA: Toward White-box Protection for Customized Stable Diffusion Models via Watermark LoRA"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2405.11135","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:ba4ce13865485b05312f01161f4c8fd1e190eea890efefde6a27cb728a70f4ba","target":"record","created_at":"2026-07-05T08:20:33Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"2f6ca10fa9a9083f14fffb113e0b1bc9ecdced7530f63cf6d35576229fceaa68","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2024-05-18T01:25:47Z","title_canon_sha256":"fef7ad6a57c38904cd23ba59f5cfedbcec1881ad8bd22dd6c5ab6940c098fe79"},"schema_version":"1.0","source":{"id":"2405.11135","kind":"arxiv","version":1}},"canonical_sha256":"5d36cf26ac69bc5fe5b60a7929a9f47e48433a744912bdb2a5adafc42950a15f","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5d36cf26ac69bc5fe5b60a7929a9f47e48433a744912bdb2a5adafc42950a15f","first_computed_at":"2026-07-05T08:20:33.806608Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T08:20:33.806608Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"P17QozjNZiLDkhbdYexxMcppwjvCPc4qbpg29twmRXoQPR+pbbJbIhYvLBYtUJ36JKLzIH4+6HzmrlttJUcADQ==","signature_status":"signed_v1","signed_at":"2026-07-05T08:20:33.807038Z","signed_message":"canonical_sha256_bytes"},"source_id":"2405.11135","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:ba4ce13865485b05312f01161f4c8fd1e190eea890efefde6a27cb728a70f4ba","sha256:eb5fe1c311893b7caff2556fc5734ef61137918c8efc488f81f7b96054352c3b"],"state_sha256":"8a98b2a9c434cdfe98354c6ae2208aca1b6a5d9a4c34245cf87874c88443e548"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"gKus1GaSK32jZvnEvqS+k3lCEmJVkDtZ2UhkGVwmFUllNr4o9iGomjc8Xh9qdTtKsMf/FUr48dmb4ujSvYH7Bg==","signed_message":"bundle_sha256_bytes","signed_at":"2026-08-08T16:56:31.579989Z","bundle_sha256":"35e23f1106dbd6abde64322c1f6e25000fa72e1a2de63c66c44729ae67fc0e2e"}}